2869 Commits (6151a0540b94dea0bb014b26e9ac6ea84d000f05)

Author	SHA1	Message	Date
Jan-Christoph Borchardt	6e60b6ee7c	shorten quota usage wording, fix overflow on mobile, fix #21129	10 years ago
Jenkins for ownCloud	89584716f8	[tx-robot] updated from transifex	10 years ago
Morris Jobke	ed98cdf532	Use OCP\Util::getVersion instead of the internal private implementation	10 years ago
Morris Jobke	e42f262d85	properly use OCP\Util instead of OC_Helper	10 years ago
Roeland Jago Douma	9fe3d2f1f8	OC_Helper::linkToRoute is deprecated ... Replaced all calls to OC_Helper::linkToRoute with OC::$server->getURLGenerator()->linkToRoute	10 years ago
Roeland Jago Douma	6248bad0f7	Add a default size to the avatar placeholders ... This removed the need to do an avatar request on the "empty" row in the user settings.	10 years ago
Roeland Jago Douma	7e44ea5da0	Remove deprecated function OC_User::getManager ... Private deprecated function => removed Replaced all instances with suggested replacement	10 years ago
Arthur Schiwon	0ecbfae5ff	initialize l10n instance earlier, fixes an undefined var warning followed by a php error	10 years ago
Roeland Jago Douma	a81836a42f	Only load the big (128x128) avatar on the perosnal page ... Before the code was executed on every page if a user was logged in. Now only on the personal page. Thus saving a request on all other pages.	10 years ago
michag86	7a86f10ebc	Update users.js	10 years ago
Jenkins for ownCloud	a7cd8103b5	[tx-robot] updated from transifex	10 years ago
Jenkins for ownCloud	74de12c698	[tx-robot] updated from transifex	10 years ago
Jenkins for ownCloud	acce1638e5	[tx-robot] updated from transifex	10 years ago
Thomas Müller	01b9f07ac8	Remove info about database locking performance	10 years ago
Jenkins for ownCloud	078ca149b5	[tx-robot] updated from transifex	10 years ago
Jenkins for ownCloud	dda9525c4b	[tx-robot] updated from transifex	10 years ago
Lukas Reschke	4b293dffe5	Use \OCP\Util::sanitizeHTML instead of \OC_Util::sanitizeHTML	10 years ago
Scrutinizer Auto-Fixer	453e1bf66e	Scrutinizer Auto-Fixes ... This commit consists of patches automatically generated for this project on https://scrutinizer-ci.com	10 years ago
Patrick Robertson	96a83a783f	Add 'my groups' anchor to the personal page sidebar	10 years ago
michag86	cf0d163a32	reset mailadress/displayname on blur	10 years ago
Jenkins for ownCloud	f0b1ba713d	[tx-robot] updated from transifex	10 years ago
Morris Jobke	e6d4496fc2	Remove unused setActiveNavigationEntry of OC_App - it's also in OCP\App	10 years ago
Roeland Jago Douma	8c9a3ccefc	Do not request an avatar if there is none	10 years ago
Roeland Jago Douma	a619629ac0	Only try to load avatars in the user list if there is any	10 years ago
Roeland Jago Douma	50d862e5d1	[Avatars] JS should not load same avatar twice ... Old code first dit an ajax request to the avatar. Then a new image object with the same src was created and since we do not cache avatars yet :( this resulted in 2 sequential requests to the exact same URL Now if you set the displayname it will first set the placeholder and then load the avatar in the background. Only once this time!	10 years ago
Jenkins for ownCloud	5c178a2719	[tx-robot] updated from transifex	10 years ago
Thomas Müller	eebe2b9c23	User IUser::getEMailAddress() all over the place	10 years ago
Morris Jobke	0a6db3ada6	Remove OC_Config from app management template ... * add unit test for this case	10 years ago
Jenkins for ownCloud	4f4b91a9ec	[tx-robot] updated from transifex	10 years ago
Lukas Reschke	4971015544	Add code integrity check ... This PR implements the base foundation of the code signing and integrity check. In this PR implemented is the signing and verification logic, as well as commands to sign single apps or the core repository. Furthermore, there is a basic implementation to display problems with the code integrity on the update screen. Code signing basically happens the following way: - There is a ownCloud Root Certificate authority stored `resources/codesigning/root.crt` (in this PR I also ship the private key which we obviously need to change before a release 😉). This certificate is not intended to be used for signing directly and only is used to sign new certificates. - Using the `integrity:sign-core` and `integrity:sign-app` commands developers can sign either the core release or a single app. The core release needs to be signed with a certificate that has a CN of `core`, apps need to be signed with a certificate that either has a CN of `core` (shipped apps!) or the AppID. - The command generates a signature.json file of the following format: ```json { "hashes": { "/filename.php": "2401fed2eea6f2c1027c482a633e8e25cd46701f811e2d2c10dc213fd95fa60e350bccbbebdccc73a042b1a2799f673fbabadc783284cc288e4f1a1eacb74e3d", "/lib/base.php": "55548cc16b457cd74241990cc9d3b72b6335f2e5f45eee95171da024087d114fcbc2effc3d5818a6d5d55f2ae960ab39fd0414d0c542b72a3b9e08eb21206dd9" }, "certificate": "-----BEGIN CERTIFICATE-----MIIBvTCCASagAwIBAgIUPvawyqJwCwYazcv7iz16TWxfeUMwDQYJKoZIhvcNAQEF\nBQAwIzEhMB8GA1UECgwYb3duQ2xvdWQgQ29kZSBTaWduaW5nIENBMB4XDTE1MTAx\nNDEzMTcxMFoXDTE2MTAxNDEzMTcxMFowEzERMA8GA1UEAwwIY29udGFjdHMwgZ8w\nDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBANoQesGdCW0L2L+a2xITYipixkScrIpB\nkX5Snu3fs45MscDb61xByjBSlFgR4QI6McoCipPw4SUr28EaExVvgPSvqUjYLGps\nfiv0Cvgquzbx/X3mUcdk9LcFo1uWGtrTfkuXSKX41PnJGTr6RQWGIBd1V52q1qbC\nJKkfzyeMeuQfAgMBAAEwDQYJKoZIhvcNAQEFBQADgYEAvF/KIhRMQ3tYTmgHWsiM\nwDMgIDb7iaHF0fS+/Nvo4PzoTO/trev6tMyjLbJ7hgdCpz/1sNzE11Cibf6V6dsz\njCE9invP368Xv0bTRObRqeSNsGogGl5ceAvR0c9BG+NRIKHcly3At3gLkS2791bC\niG+UxI/MNcWV0uJg9S63LF8=\n-----END CERTIFICATE-----", "signature": "U29tZVNpZ25lZERhdGFFeGFtcGxl" } ``` `hashes` is an array of all files in the folder with their corresponding SHA512 hashes (this is actually quite cheap to calculate), the `certificate` is the certificate used for signing. It has to be issued by the ownCloud Root Authority and it's CN needs to be permitted to perform the required action. The `signature` is then a signature of the `hashes` which can be verified using the `certificate`. Steps to do in other PRs, this is already a quite huge one: - Add nag screen in case the code check fails to ensure that administrators are aware of this. - Add code verification also to OCC upgrade and unify display code more. - Add enforced code verification to apps shipped from the appstore with a level of "official" - Add enfocrced code verification to apps shipped from the appstore that were already signed in a previous release - Add some developer documentation on how devs can request their own certificate - Check when installing ownCloud - Add support for CRLs to allow revoking certificates **Note:** The upgrade checks are only run when the instance has a defined release channel of `stable` (defined in `version.php`). If you want to test this, you need to change the channel thus and then generate the core signature: ``` ➜ master git:(add-integrity-checker) ✗ ./occ integrity:sign-core --privateKey=resources/codesigning/core.key --certificate=resources/codesigning/core.crt Successfully signed "core" ``` Then increase the version and you should see something like the following:  As you can see a failed code check will not prevent the further update. It will instead just be a notice to the admin. In a next step we will add some nag screen. For packaging stable releases this requires the following additional steps as a last action before zipping: 1. Run `./occ integrity:sign-core` once 2. Run `./occ integrity:sign-app` _for each_ app. However, this can be simply automated using a simple foreach on the apps folder.	10 years ago
Jenkins for ownCloud	8421a43df1	[tx-robot] updated from transifex	10 years ago
Lukas Reschke	3ea654d2d4	Use .text instead of .html ... Makes some static source code analyzers happier.	10 years ago
Jenkins for ownCloud	5a9b892b2e	[tx-robot] updated from transifex	10 years ago
Jenkins for ownCloud	d305412a35	[tx-robot] updated from transifex	10 years ago
Jenkins for ownCloud	39fb320bae	[tx-robot] updated from transifex	10 years ago
Jenkins for ownCloud	dd18ea611b	[tx-robot] updated from transifex	10 years ago
Jenkins for ownCloud	6e60c0f0c4	[tx-robot] updated from transifex	10 years ago
Jenkins for ownCloud	cb69e6c201	[tx-robot] updated from transifex	10 years ago
Jenkins for ownCloud	56e05a90af	[tx-robot] updated from transifex	10 years ago
Jenkins for ownCloud	2321cc4854	[tx-robot] updated from transifex	10 years ago
Jenkins for ownCloud	eb42340fa3	[tx-robot] updated from transifex	10 years ago
Roeland Jago Douma	0265bcfdae	Moved changedisplayname to usercontroller ... Killed the old static route to change a users display name and moved it to a properly testable controller.	10 years ago
Jenkins for ownCloud	764504de19	[tx-robot] updated from transifex	10 years ago
Björn Schießle	97c60fd217	change 'cronstatus' to 'status' so that it can be used in other apps too	10 years ago
Jenkins for ownCloud	c10be07c1b	[tx-robot] updated from transifex	10 years ago
Jan-Christoph Borchardt	9671103121	clarify log level setting design, fix #20514	10 years ago
Jenkins for ownCloud	5dd59b4bd2	[tx-robot] updated from transifex	10 years ago
Jan-Christoph Borchardt	83c177fc1b	move font back from Light to Regular for body text on normal-res screens, fix #18954	10 years ago
Jan-Christoph Borchardt	e9691893b5	use new checkbox style for Apps mgmt settings	10 years ago
Thomas Müller	267d30d4f6	Fix #18072	10 years ago